My Oracle Support Banner

Audit Action# 102 Is Not Written To Aud$ If session Exceeds A Profile Limit (Doc ID 1372067.1)

Last updated on MARCH 12, 2021

Applies to:

Oracle Database - Enterprise Edition - Version 11.2.0.2 and later
Oracle Database Cloud Schema Service - Version N/A and later
Oracle Database Exadata Express Cloud Service - Version N/A and later
Oracle Database Exadata Cloud Machine - Version N/A and later
Oracle Cloud Infrastructure - Database Service - Version N/A and later
Information in this document applies to any platform.
Checked for relevance on 10-APR-2013

Symptoms

NOTE: In the images and/or the document content below, the user information and data used represents fictitious data from the Oracle sample schema(s) or Public Documentation delivered with an Oracle database product. Any similarity to actual persons, living or dead, is purely coincidental and not intended in any manner.  



When AUDIT CREATE SESSION is in effect and even when the audit_trail parameter is set to "DB" or "DB,EXTENDED" it is observed that in some cases the audit record for the 'logoff by cleanup' event (action# 102) is written to an OS audit file.

The following is an example of how the audit records written to directory audit_file_dest look like:

$ egrep 102 *.aud
v1120_ora_25982_1.aud:SESSIONID:[8] "28041264" ENTRYID:[1] "1" USERID:[7]
"USERNAM" ACTION:[3] "102" RETURNCODE:[1] "0" LOGOFF$PREAD:[1] "4"
LOGOFF$LREAD:[4] "1174" LOGOFF$LWRITE:[1] "8" LOGOFF$DEAD:[1] "0" DBID:[9]
"1111111111" SESSIONCPU:[2] "13"
v1120_ora_26592_1.aud:SESSIONID:[8] "28051273" ENTRYID:[1] "1" USERID:[7]
"USERNAM" ACTION:[3] "102" RETURNCODE:[1] "0" LOGOFF$PREAD:[1] "0"
LOGOFF$LREAD:[2] "37" LOGOFF$LWRITE:[1] "4" LOGOFF$DEAD:[1] "0" DBID:[9]
"1111111111" SESSIONCPU:[2] "55"

Changes

A version or patch including the fix to unpublished bug 5476184 was installed.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.